#37397 [Bgs->Opn]: Win32 PHP crash
| From: | alex at onix-systems dot com | Date: | Fri, 12 May 2006 08:58:54 +0000 |
| Subject: | #37397 [Bgs->Opn]: Win32 PHP crash | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-97005@lists.php.net to get a copy of this message | ||
ID: 37397
User updated by: alex at onix-systems dot com
Reported By: alex at onix-systems dot com
-Status: Bogus
+Status: Open
Bug Type: PCRE related
-Operating System: WinCP
+Operating System: WinXP
PHP Version: 5.1.4
New Comment:
This is very strange explanation. I would believe in it but this worked
fine in previous versions of PHP (5.1.2 and lower) and also works fine
under Linux even in new versions. There is definitely some issue in
Win32 build. Don't you think so?
Previous Comments:
------------------------------------------------------------------------
[2006-05-11 20:41:46] edink@php.net
Using nested quantifiers will use up all available stack, there is
nothing we can do about this.
------------------------------------------------------------------------
[2006-05-10 13:04:34] alex at onix-systems dot com
It crashes as well.
------------------------------------------------------------------------
[2006-05-10 12:42:24] derick@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5.2-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5.2-win32-latest.zip
------------------------------------------------------------------------
[2006-05-10 12:25:42] alex at onix-systems dot com
Description:
------------
Can be reproduced on Win32. Works fine under Linux.
Appieared in PHP-5.1.3 ans still exists in PHP-5.1.4
The following code results stack overflow and PHP crash.
Code works fine if $a < 1560
Reproduce code:
---------------
<?
$value = "";
for( $a=0; $a < 1561; $a++ ) {
$value .= "t";
}
$res = preg_split(
'/(?:(?:(?:(?<!\\\\)(?:[\\\\](?:[\\\\]{2})*))+[\$])|[^\$])*/', $value
);
?>
Expected result:
----------------
nothing in this example
Actual result:
--------------
PHP crash
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=37397&edit=1